Your endpoint hears every change, signed and retried.

01Overview

Overview

A webhook sends a POST to your URL when the events you chose happen. Each delivery is signed so you can prove it came from xpntl, retried if your endpoint is down, and logged so you can see what happened.

1. 1

   Create the webhook

   Open Settings → Webhooks and select Create Webhook. Enter your URL and pick the events to send.

2. 2

   Copy the signing secret

   The secret is shown once, when the webhook is created or its secret is rotated.

3. 3

   Verify each delivery

   Compute HMAC-SHA256 over the raw request body with the secret and compare it with the signature header.

   X-Webhook-Signature: sha256=...
   X-Webhook-Event: issue.created
   X-Webhook-Delivery: <delivery id>

03What it does

What it does